CVE-2023-3959
9.8
CRITICAL · CVSS 3.1 · EPSS 48.8% (pctl 99)
Patch early
EPSS 48.8% — above the 10% action threshold.
Description
Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 are vulnerable to multiple instances of stack-based overflows. While processing XML elements from incoming network requests, the product does not sufficiently check or validate allocated buffer size. This may lead to remote code execution.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 48.77% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-121 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2023-11-08 |
| Last modified | 2026-06-17 |
Affected (22)
| Vendor | Product |
|---|---|
| zavio | b8220 |
| zavio | b8220 firmware |
| zavio | b8520 |
| zavio | b8520 firmware |
| zavio | cb3211 |
| zavio | cb3211 firmware |
| zavio | cb3212 |
| zavio | cb3212 firmware |
| zavio | cb5220 |
| zavio | cb5220 firmware |
| zavio | cb6231 |
| zavio | cb6231 firmware |
| zavio | cd321 |
| zavio | cd321 firmware |
| zavio | cf7201 |
| zavio | cf7201 firmware |
| zavio | cf7300 |
| zavio | cf7300 firmware |
| zavio | cf7500 |
| zavio | cf7500 firmware |
| zavio | cf7501 |
| zavio | cf7501 firmware |
References
→ the Explorer · watch your stack · NVD